$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e20313331363432.roa File: 3130332e32332e3130382e302f32332d3332203d3e20313331363432.roa (raw, json) Hash identifier: /zyY4xHrRSNJrzW1F2W6rj36r/peZFfh4+++ESxgZwc= Subject key identifier: 82:63:1D:83:C3:98:28:DE:D7:B1:06:12:BD:DC:F4:CD:AC:97:7F:B5 Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF Certificate serial: 08D85681F94AD1AE17337DF237FA2D04A2E350DF Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e20313331363432.roa Signing time: Thu 20 Aug 2026 09:04:01 +0000 ROA not before: Thu 20 Aug 2026 08:59:01 +0000 ROA not after: Thu 19 Aug 2027 09:04:01 +0000 asID: 131642 IP address blocks: 103.23.108.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 05:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d8:56:81:f9:4a:d1:ae:17:33:7d:f2:37:fa:2d:04:a2:e3:50:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF Validity Not Before: Aug 20 08:59:01 2026 GMT Not After : Aug 19 09:04:01 2027 GMT Subject: CN=82631D83C39828DED7B10612BDDCF4CDAC977FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:87:d3:40:19:6e:20:86:12:62:a9:f7:42: 3d:8e:46:50:5c:f5:c2:8a:95:b3:0d:49:dd:41:42: cc:5c:29:eb:30:f6:d3:f4:30:d6:fc:d6:df:c7:de: f3:c3:3a:34:db:18:6d:1f:0a:8a:c4:79:a9:42:81: 4a:42:23:37:d7:0b:16:28:f7:eb:2c:1c:7e:b7:a5: 6a:cc:ee:e7:91:18:10:79:b2:d7:19:b4:58:e4:ee: df:71:ba:71:45:b1:8c:a7:16:56:3b:b4:32:58:9c: c7:8d:b2:a3:f6:f8:6b:2a:8e:6d:39:c8:9e:fb:31: d6:41:62:f0:d9:70:f8:81:c0:b8:db:cc:e9:c8:8f: 3e:b7:3b:89:7b:f3:c9:cb:b1:02:5c:39:85:af:71: 73:a4:b3:cd:1e:68:9b:d5:b7:63:ac:e3:b4:ab:83: 32:b5:2f:0c:10:dc:5a:37:16:b5:13:db:bd:8f:de: ea:77:29:e6:90:98:1c:94:ac:ec:7c:27:13:e4:81: 00:3d:1a:ad:23:6e:7c:53:b6:88:19:ba:5a:cb:6c: 04:ff:98:ea:6e:a0:fe:eb:c7:45:de:ef:44:e7:95: 43:17:a7:fc:ef:37:14:e4:5a:0f:c7:e1:ca:9c:d5: a1:ea:25:62:d6:12:ed:5d:e8:4b:d4:e1:5c:1b:a6: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:63:1D:83:C3:98:28:DE:D7:B1:06:12:BD:DC:F4:CD:AC:97:7F:B5 X509v3 Authority Key Identifier: keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e20313331363432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.108.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:6d:e3:47:c8:c8:0e:67:16:0c:f5:1a:fd:fb:33:95:26:bc: 42:0c:a6:0b:1a:bb:23:c3:d9:9e:47:04:1c:0e:eb:17:ca:29: f3:6e:3b:19:89:d6:92:e2:91:2a:6f:39:c1:c4:12:16:4f:45: d3:6d:b5:56:39:23:f0:a9:55:4d:78:53:a2:d2:8a:3f:3d:5d: bc:05:5b:44:bd:ad:e5:b5:d0:52:4f:cf:a3:6c:8e:21:91:f3: a5:15:12:57:0e:b5:1f:d6:70:f7:91:c6:9e:a7:db:e5:e3:40: ee:61:8b:16:7b:55:d2:7f:32:91:52:84:e2:9c:05:d8:51:73: 67:6c:6f:6d:2b:c4:64:b0:4f:09:55:c8:a6:a3:95:4e:a5:ab: 71:0c:04:c4:6c:71:2e:28:4a:64:dc:bd:73:91:aa:ba:9f:ba: 91:37:78:0c:3b:1e:60:03:68:c2:0e:e0:19:d7:1a:33:95:13: 4f:1c:e6:db:5d:f5:ed:9b:a4:b6:ae:02:1b:53:c1:d9:3e:93: 6a:e0:ec:7f:4f:e7:d9:31:82:e9:80:e4:7e:1e:16:b0:31:f4: 82:c9:5d:a2:85:c0:89:f2:c0:f2:7c:84:11:2f:64:e4:37:4b: 9f:4e:ba:41:b6:75:23:0f:b4:3e:7e:7e:78:5c:83:a3:51:85: 6d:04:48:cb -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUCNhWgflK0a4XM33yN/otBKLjUN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4 NDkwRkFCRjAeFw0yNjA4MjAwODU5MDFaFw0yNzA4MTkwOTA0MDFaMDMxMTAvBgNV BAMTKDgyNjMxRDgzQzM5ODI4REVEN0IxMDYxMkJERENGNENEQUM5NzdGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhofTQBluIIYSYqn3Qj2ORlBc 9cKKlbMNSd1BQsxcKesw9tP0MNb81t/H3vPDOjTbGG0fCorEealCgUpCIzfXCxYo 9+ssHH63pWrM7ueRGBB5stcZtFjk7t9xunFFsYynFlY7tDJYnMeNsqP2+Gsqjm05 yJ77MdZBYvDZcPiBwLjbzOnIjz63O4l788nLsQJcOYWvcXOks80eaJvVt2Os47Sr gzK1LwwQ3Fo3FrUT272P3up3KeaQmByUrOx8JxPkgQA9Gq0jbnxTtogZulrLbAT/ mOpuoP7rx0Xe70TnlUMXp/zvNxTkWg/H4cqc1aHqJWLWEu1d6EvU4VwbppblAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUgmMdg8OYKN7XsQYSvdz0zayXf7UwHwYDVR0j BBgwFoAUn0YhvizrFd10gJ1SaSWIWYSQ+r8wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAv OUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RjQ2MjFCRTJDRUIxNURENzQ4MDlENTI2OTI1ODg1 OTg0OTBGQUJGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAvMzEzMDMzMmUzMjMzMmUzMTMw MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTMzMzEzNjM0MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnF2wwDQYJKoZIhvcNAQELBQADggEBACpt40fIyA5nFgz1Gv37M5UmvEIMpgsa uyPD2Z5HBBwO6xfKKfNuOxmJ1pLikSpvOcHEEhZPRdNttVY5I/CpVU14U6LSij89 XbwFW0S9reW10FJPz6NsjiGR86UVElcOtR/WcPeRxp6n2+XjQO5hixZ7VdJ/MpFS hOKcBdhRc2dsb20rxGSwTwlVyKajlU6lq3EMBMRscS4oSmTcvXORqrqfupE3eAw7 HmADaMIO4BnXGjOVE08c5ttd9e2bpLauAhtTwdk+k2rg7H9P59kxgumA5H4eFrAx 9ILJXaKFwInywPJ8hBEvZOQ3S59OukG2dSMPtD5+fnhcg6NRhW0ESMs= -----END CERTIFICATE-----Generated at Thu Sep 10 10:13:59 2026 by rpki-client